ISMS Consultant

About the role

The Firm is looking for an ISMS Consultant to join its IT consulting practice. You will work directly with clients to design, implement and manage information security management systems and related security initiatives.

Key responsibilities

• Lead or support client engagements focused on ISO 27001, NIST CSF, PCI DSS, GDPR and other security frameworks.
• Design, implement and operate Security Operations Centers (SOC) and Security Incident & Event Management (SIEM) solutions.
• Perform network design, infrastructure audits, vulnerability and risk assessments, and penetration testing of web applications.
• Implement security technologies such as Privileged Identity Management (PIM), Data Loss Prevention (DLP) and Identity Management (IDM).
• Develop and enforce policies, procedures and hardening guidelines for operating systems, databases and network components.

Required profile

• 2‑4+ years of experience in information security, risk management and ISMS/BCMS implementation.
• Relevant degree (B.E., B.Tech, MBA) and preferably certifications such as CISA, CISSP, PMP or ISO 27001 Lead Auditor.
• Client‑facing experience with strong interpersonal and communication skills.
• Ability to handle confidential information and travel as required.

Required skills

• ISO 27001, NIST CSF, PCI DSS, GDPR, ITIL, COBIT.
• Network design, infrastructure audit, vulnerability assessment, penetration testing.
• SOC/SIEM implementation, PIM, DLP, IDM.
• Scripting (Perl, PHP, Python, Bash) and programming (C, C++, Java).
• Operating system and database hardening, security management.